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Top Stories 

• The Attorney General’s Office announced two Mercer County gas stations are among six 
being sued by New Jersey for allegedly selling aviation fuel to unknowing drivers. - Times 
of Trenton (See item 2) 

• A 45 -car train carrying chemicals derailed and hit a garbage truck outside of Baltimore, 
Maryland triggering an explosion that damaged some industrial buildings, forced 
authorities to evacuate a 20-block area, and left 4 people injured. - USA Today (See item 8) 

• Wal-Mart Stores pleaded guilty to charges of six counts of violating the Clean Water Act in 
California and one count of violating a federal law related to pesticide disposal in Missouri, 
agreeing to pay nearly $82 million in fines. - New York Times (See item 19 ) 

• A hacker who identified with the Anonymous hacktivist label pleaded guilty to 
participating in several attacks in 2010 and 2011, including attacks against law 
enforcement computer systems and analysis company Stratfor. - IDG News Service (See 
item 38) 

• The Anaheim, California police department reported a small explosion from an apparent 
dry ice bomb forced them to evacuate the Toontown area of Disneyland. - Los Angeles 
Times (See item 45) 
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Energy Sector 

1. May 29, Associated Press - (North Dakota) Victim identified in death at North 
Dakota oil rig. Officials are investigating an incident at an oil rig in northwestern 
North Dakota that killed a worker May 25 when a payloader backed over him. 

Source: http://www.ktbs.com/storv/22444250/victim-identified-in-death-at-north- 
dakota-oil-rig 

2. May 28, Times of Trenton - (New Jersey) Two Mercer County gas stations sued for 
selling aviation fuel instead of gasoline. The Attorney General’s Office announced 
two Mercer County gas stations are among six being sued by New Jersey for allegedly 
selling aviation fuel to unknowing drivers. The suit determined the stations were aware 
the 65,000 gallons of discounted fuel they purchased from Zephyr Oil, a Brooklyn- 
based fuel distributer, was aviation fuel and was sold as unleaded regular, plus, or 
premium fuel to consumers. 

Source: 

http://www.ni.com/mercer/index.ssf/2013/05/two mercer county gas stations.html 

3. May 28, Baltimore Sun - (Maryland) Royal Farms fined for Md. fuel leaks. Royal 
Farms, a Baltimore-based convenience store chain, agreed to pay a $600,000 penalty 
for fuel leaks at two of its Maryland outlets and has committed to comprehensive audits 
of the underground fuel tanks and piping at 70 of its stores over the next 2 years. 
Source: http://www.baltimoresun.com/features/green/blog/bs-gr-royal-farms-gas-leaks- 
20130524,0,4984161 .story 

[ Return to top ] 
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Chemical Industry Sector 



Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

4. May 28, Defense News - (International) Chinese hackers breach top weapons 
designs. According to a report prepared by the Defense Science Board, Chinese 
hackers have gained access to the designs of many of the United States most sensitive 
advanced weapons systems. 

Source: 

http://www.defensenews.com/article/20130528/DEFREG02/305280015/Report- 

Chinese-Hackers-Breach-Top-Weapons-Designs 

For another story, see item 35 
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Financial Services Sector 

5. May 29, Santa Rosa Press Democrat - (California) Suspected ‘Hoodie Bandit’ 
arrested in Santa Rosa. Santa Rosa police arrested a man believed to be the “Hoodie 
Bandit” responsible for three robberies at ba nk counters inside grocery stores. 

Source: http://www.pressdemocrat.com/article/20130528/ARTICLES/130529538 

6. May 28, Torrance Daily Breeze - (California) Make It Quick Bandit robs same San 
Pedro bank for the third time. A suspect known as the “Make It Quick Bandit” 
robbed the same U.S. Bank branch inside a Vons supermarket in San Pedro that he had 
previously robbed twice before, his eleventh robbery in total. 

Source: http://www.dailybreeze.com/news/ci 23339959/make-it-quick-bandit-robs- 
same-san-pedro 
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7. May 28, Reuters - (National) Former KPMG partner plead guilty to insider trading 
scheme. A former senior partner at accounting firm KPMG pleaded guilty to 
participating in insider trading with others that netted a total of $2.5 million. 

Source: http://www.reuters.com/article/2013/05/29/us-kpmg-trading- 
idUSBRE94S00720 130529 

[ Return to top ] 

Transportation Systems Sector 

8. May 28, USA Today - (Maryland) Freight train derails, explodes near Baltimore. A 
45-car train carrying chemicals derailed and hit a garbage truck outside of Baltimore. 
Fifteen cars derailed and two caught fire which triggered an explosion that damaged 
some industrial buildings, forced authorities to evacuate a 20-block area, and left 4 
people injured. 

Source: http://www.usatodav.com/story/news/nation/2013/05/28/train-derails-in- 
marvland-explosion-reported/2366957/ 

9. May 28, WTMJ 4 Milwaukee - (Wisconsin) Truck crashes into bridge on U.S. 45, 
damaging structure. Ramps to U.S. Route 45 northbound from both east and 
westbound Interstate 94 in Milwaukee were shut down for several hours after a truck 
crashed into a bridge over Highway 45 and Wisconsin Avenue Bridge and sent pieces 
of concrete into 3 cars. 

Source: http://www.todavstmi4.com/news/local/209174981.html 

10. May 28, Eugene Register-Guard - (Oregon) Man killed in 3-vehicle crash near 
Oakridge. A fatal accident along Highway 58 about 12 miles east of Oakridge blocked 
the highway’s eastbound lane for several hours. 

Source: http://www.registerguard.com/rg/news/local/29938272-75/pickup-police- 
oakridge-driver-tovota.html .csp 

1 1 . May 28, Anchorage Daily News - (Alaska) Glenn Highway reopens after nine-car 
accident. The Glenn Highway was closed between North Birchwood Loop Road and 
South Peters Creek in Chugiak for nearly 2 hours following a nine-car accident May 
28. 

Source: http://www.adn.com/2013/Q5/28/2918364/glenn-highwav-reopens-after- 
nine.html 

12. May 28, KAKE 10 Wichita - (Kansas) Highway patrol: Four dead in 1-70 crash. A 
May 28 accident in which four people were killed closed eastbound lanes of Interstate 
70 in Ellsworth County for nearly 4 hours. 

Source: http://www.kake.com/news/headlines/Multiple-Fatalities-Reported-In-Crash- 
Qn-I-70-209190271.html 

13. May 28, St. Michael Patch - (Minnesota) Highway 241 ramp in St. Michael 
temporarily closes after crash. The Highway 241 ramp eastbound on Interstate 94 in 
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St. Michael was closed for over 3 hours May 28 following a reported accident after a 
police pursuit. 

Source: http://stmichael.patch.com/articles/highwav-241-ramp-in-st-michael- 
temporarily-closes-after-crash 

14. May 28, KTVT 11 Fort Worth - (Texas) Driver dies in Fort Worth 18-wheeler crash. 
A fatal accident May 28 that killed the driver of an 18-wheeler when it overturned 
along Interstate -35W south of Heritage Trace Parkway, prompted authorities to shut 
down southbound lanes for several hours while traffic on northbound lanes experienced 
delays. 

Source: http://dfw.cbslocal.com/2013/05/28/driver-dies-in-fort-worth-18-wheeler- 
crash/ 



15. May 28, Associated Press - (Iowa) Iowa residents deal with flooded roads, 

basements. Heavy rainfall throughout Iowa May 25 - 27 dropped more than 8 inches 
in some communities and caused multiple rivers to overflow, flooded basements, 
shutdown municipal water plants, closed portions of at least 10 State highways, and 
caused flash floods resulting in mudslides and road erosion. Two-week forecasts called 
for additional rain and threatened area flooding due to already saturated ground. 

Source: http://wcfcourier.com/news/state-and-regional/iowa/iowans-deal-with-closed- 
roads-flooded-basements/article 34d46830-6833-5bl4-b60a-479ede990e49.html 



[ Return to top ] 

Food and Agriculture Sector 

16. May 29, Sacramento Bee - (California) Investigation confirms February Norovirus 
outbreak at Mulvaney’s in midtown Sacramento. An outbreak of Norovirus that 
sickened 138 people in February at Mulvaney’s B&L in Sacramento was confirmed by 
Sacramento County Public Health officials following an investigation. 

Source: http://www.sacbee.com/2013/05/29/5454383/investigation-confirms- 
february.html 

17. May 28, Food Safety News - (North Carolina) Salmonella outbreak linked to NC 
Holiday Inn sickens 88. Around 88 people are now known to have been sickened in a 
Salmonella outbreak linked to the Holiday Inn Bordeaux in Fayetteville. 

Source: http://www.foodsafetvnews.com/2013/05/salmonella-outbreak-linked-to-nc- 
holiday-inn-sickens-88/#.UaXpikCkr44 

18. May 28, Pekin Daily Times - (Illinois) Lightning ignites fuel tank, no injuries. Fire 
officials spent over 3 hours containing flames at the Illinois Com Processing plant in 
Pe ki n May 28 after a large fuel storage tank was struck by lightning. Authorities are 
investigating the incident. 

Source: http ://w w w.pekintimes . com/article/20 1 305 28/NEWS/ 1 30529588/1 005/NEW S 
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Water and Wastewater Systems Sector 

19. May 28, New York Times- (California; Missouri) Wal-Mart is fined $82 Million over 
mishandling of hazardous wastes. Wal-Mart Stores pleaded guilty May 28 to charges 
of six counts of violating the Clean Water Act in California and one count of violating 
a federal law related to pesticide disposal in Missouri, agreeing to pay nearly $82 
million in fines. 

Source: http://www.nvtimes.com/2013/05/29/business/wal-mart-is-fined-82-rnillion- 
over-mishandling-of-hazardous-wastes.html? r=0 

20. May 28, Los Angeles Times- (Alaska) National Guard to evacuate flooded Alaska 
town. An ice jam along the Yukon River caused significant flooding and affected the 
town of Galena, prompting the Alaska governor to call upon the National Guard to 
evacuate the remaining 75 residents staying in two city shelters. The ice jam was 
expected to give way May 28-29, which would alleviate flooding in Galena but likely 
cause flooding in Koyukuk and Nulato. 

Source: http://www.latimes.com/news/nation/nationnow/la-na-nn-galena-alaska-flood- 
20130528,0,2891601 .story 

For another story, see item 15 
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Healthcare and Public Health Sector 

21. May 29, Associated Press - (Tennessee) Residents evacuated from Chattanooga 
assisted living facility. Patten Towers, a Chattanooga assisted living center, was 
evacuated May 28 when electrical power was shut down due to a fire. All 241 residents 
were temporarily displaced until the repairs are made. 

Source: http://www.local8now.com/news/state/headlines/Residents-evacuated-in- 
Chattanooga-assisted-living-facility— 209312961.html 

22. May 28, U.S. Department of Labor - (New York) US Labor Department’s OSHA 
cites Schenectady, NY, medical lab for inadequate worker safeguards against 
bloodborne pathogen hazards. Laboratory Corp. of America Holdings was cited and 
faces $58,000 in penalties by the U.S. Labor Department’s Occupational Safety and 
Health Administration for alleged repeat and serious health violations after an 
inspection of its Schenectady location. Violations include staff that did not receive 
required training in an adequate and timely manner that put them at risk of exposure to 
bloodborne pathogen hazards. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEAS 
ES&p id=241 1 1 

23. May 28, Health IT Security - (California) Sonoma Valley Hospital notifies patients 
of data breach. Sonoma Valley Hospital notified 1,350 surgery patients of a health 
data breach that occurred February 14 during the hospital’s routine Web site software 
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update which allowed data to be accessible through a search engine. Patients who 
received treatment from July 2011 through June 2012 were affected. 

Source: http://healthitsecuritv.com/2013/05/28/sonoma-vallev-hospital-notifies- 
patients-of-data-breach/ 

24. May 28, Anderson Herald Bulletin - (Indiana) Federal investigation underway at 
local health center. A federal investigation is ongoing at the Madison County 
Community Health Center in Anderson into the quantity of pain medication prescribed 
by staff. In response to the inquiry the center indefinitely suspended prescribing 
Schedule II controlled drugs for new patients and is requiring existing patients to 
undergo a 10- week pain management program. 

Source: http://heraldbulletin.com/business/xll67598645/Federal-investigation- 
underway-at-local-health-center 



For another story, see item 44 
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Government Facilities Sector 

25. May 29, WFSB 3 Hartford - (Connecticut) Stratford High School, town hall given 
all-clear. Stratford High School and town hall were evacuated for 2 hours May 29 after 
a suspicious item was discovered between both locations. Police investigated the 
suspicious items and gave the all-clear. 

Source: http://www.wfsb.com/storv/22446010/stratford-high-school-implements-stav- 
put-safety-measure 

26. May 29, Softpedia - (Michigan) Turkish hackers deface website of Michigan state 
capital, leak data. A Turkish hacktivist group breached the official Web site of the 
City of Lansing and leaked a 5.8MB archive file containing usernames and personal 
in formation stolen from the organization’s databases. Administrators have since 
removed the defaced page. 

Source: http://news.softpedia.com/news/Turkish-Hackers-Deface-Website-of- 
Michigan-State-Capital-Leak-Data-356666.shtml 

27. May 28, KSWT 13 Yuma - (Arizona) Picacho State Park reopens after wildfire. 
Picacho State Recreation campgrounds were reopened along with the upper and lower 
docks after a wildfire erupted at the park and caused damaged. Portions of the park 
remain closed and officials warn there may be areas of smoldering fire underneath the 
top soil. 

Source: http://www.kswt.com/story/22442022/picacho-state-r 

28. May 28, Des Moines Register - (Iowa) Rising water closes Walnut Woods State 
Park; road closure expected by 10 p.m. Officials closed Walnut Woods State Park in 
West Des Moines May 28 due to rising water levels. The park will remain closed until 
river levels drop. 

Source: http://blogs.desmoinesregister.com/dmr/index.php/2013/05/28/rising-water- 
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closes-walnut-woods-state-park-road-closure-expected-by-lO-p- 
m/article?nclick check=l 



29. May 28, Grand Rapids Press - (Michigan) Vandalism closes Howard City 
elementary school - windows smashed, computers vandalized. Officials cancelled 
classes at McNaughton Elementary School in Howard City May 28 after the school was 
vandalized and several computers and classrooms were damaged. Police are 
investigating the incident. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2013/05/vandalism closes howard city e.html 

30. May 28, Ventura County Star - (California) Simi Valley fire [map] contained; Santa 
Barbara blaze continues. Crews in Santa Barbara County continued to battle the 
White Fire that scorched over 2,000 acres and ignited in Los Padres National Forest 
May 28. 

Source: http://www.vcstar.com/news/2013/mav/28/simi-valley-fire-contained-santa- 
barbara-blaze/ 



31. May 28, KHTS 1220 AM Santa Clarita - (California) Valencia brush fire at 149 
acres, considered knocked down. Firefighters expected to reach full containment of a 
brush fire that burned through 149 acres in Valencia by May 28. 

Source: http://hometownstation.com/santa-clarita-news/valencia-brush-fire-near-magic- 
mountain-parkway- 10-acres-35323 

32. May 27, Associated Press - (International) US military F-15 crashes in Pacific off 
coast of Japan. The pilot of a U.S. Air Force F-15 fighter was ejected safely after the 
aircraft developed problems in flight and crashed in the Pacific about 70 miles east of 
Okinawa. The plan flew out of Kadena Air Base and the cause of the crash is under 
investigation. 

Source: http://www.foxnews.com/us/2013/05/27/us-f-15-crashes-in-pacific-off-coast- 

iapan/?test=latestnews&icid=maing- 

grid7 %7Cmain5 %7Cdl7 %7Csec3 lnkl%26pLid%3D319182 

For another story, see item 38 
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Emergency Services Sector 

33. May 28, Firehouse.com - (Kentucky) Three Ky. firefighters injured in Quint 

rollover. Three firefighters responding to a call were injured when their Shepardsville 
Quint 1 rolled over May 27. All three were transported to a local hospital and the cause 
of the crash is being investigated. 

Source: http://www.firehouse.com/news/10949738/three-kv-firefighters-iniured-in- 
quint-rollover 

For another story, see item 38 
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Information Technology Sector 

34. May 29, IDG News Service - (International) Hackers exploit Ruby on Rails 
vulnerability to compromise servers, create botnet. A vulnerability in Ruby 
on Rails that was patched in January has been seen being exploited by attackers 
to take over servers and create a botnet. 

Source: http://www.networkworld.com/news/2013/Q52913-hackers-exploit- 
ruby-on-rails-270216.html 

35. May 29, Softpedia - (International) Secunia accidentally discloses image 
viewing application vulnerabilities. A researcher accidentally emailed 
information on vulnerabilities in ERDAS ER Viewer to a public vulnerability 
mailing list. The large image file viewer is used by various organizations, 
including some in the defense industry. 

Source: http://news.softpedia.com/news/Secunia-Accidentally-Discloses-Image- 
Viewing-Application-Vulnerabilities-356700.shtml 

36. May 29, Softpedia - (International) Experts find code execution flaw in PS3, 
password reset bug in Sony Entertainment Network. Researchers at 
Vulnerability Lab revealed that several vulnerabilities in Sony’s Playstation 3 
firmware were disclosed to Sony and recently fixed. They also found that the 
Sony Entertainment Network Web site’s password recovery function could be 
exploited to reset users’ passwords. 

Source: http://news.softpedia.com/news/Experts-Find-Code-Execution-Flaw-in- 
PS3-Password-Reset-Bug-in-Sony-Entertainment-Network-356623.shtml 

37. May 29, Softpedia - (International) Expert reports two security issues to 
Dropbox, only one fixed. A researcher at Security Pulse found and disclosed 
two vulnerabilities in Dropbox. The first, an open redirect flaw, was addressed 
by Dropbox, while the second, a bug that allows attackers to unsubscribe users 
from the Dropbox for Business mailing list, was not regarded as a security issue 
by the company. 

Source: http://news.softpedia.com/news/Expert-Reports-Two-Security-Issues- 
to-Dropbox-Only-One-Fixed-Video-356762.shtml 

38. May 29, IDG News Service - (International) Anonymous member pleads 
guilty to Stratfor hack. A hacker who identified with the Anonymous 
hacktivist label pleaded guilty to participating in several attacks in 2010 and 
2011, including attacks against law enforcement computer systems and analysis 
company Stratfor. 

Source: 

http://www.computerworld.eom/s/article/9239583/Anonvmous member pleads 
guilty to Stratfor hack 

39. May 28, The H - (International) DoS vulnerability in ModSecurity fixed. The 
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developers of the ModSecurity firewall fixed a vulnerability that could be 
exploited to crash the firewall, among other fixes. 

Source: http://www.h-online.com/security/news/item/DoS-vulnerabilitv-in- 
ModSecurity-fixed-Update- 1 872307.html 

For another story, see item 4 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

40. May 28, High Plains Public Radio- (Texas) Texas panhandle stations off air. Five 
radio stations, 89.5 Spearman-Perryton, 105.7 Amarillo, 91.5 Bushland, 94.9 Amarillo, 
and 91.3 Washburn, were offline May 28 due to severe weather. 

Source: http://hppr.org/post/texas-panhandle-stations-air 



T Return to topi 



Commercial Facilities Sector 

41. May 29, KENS 5 San Antonio- (Texas) Late night apartment fire injures two. A 
three-unit apartment building in San Antonio suffered an estimated $100,000 damages 
after a fire destroyed two units and caused smoke and water damage to a third May 28. 
Source: http://www.kens5.com/news/Late-night-apartment-fire-iniures-two- 
209315451.html 

42. May 29, KFMB 8 San Diego- (California) Three women and dog escape apartment 
fire. A Mountain View apartment fire May 29 left $325,000 in damages to the building 
and additional $100,000 to surrounding businesses. The cause was under investigation. 
Source: http://www.cbs8.com/story/22445920/3-women-and-dog-escape-apartment-fire 

43. May 29, Greenbay Press Gazette - (Wisconsin) With community’s help, residents 
displaced by Allouez fire rebuild lives. Damages from a May 23 fire which destroyed 
the Hilltop Place Apartments in Allouez and displaced 107 was estimated at $3 million. 
Source: 

http://www.greenbavpressgazette.com/article/20130528/GPG0101/3052802Q5/Estimat 

ed-loss-Allouez-apartment-fire-more-than-3-million 

44. May 29, Pittsburgh Tribune -Review- (Pennsylvania) Police seek Ligonier man who 
allegedly used BB gun to rob pharmacy. A Ligonier man is wanted on charges of 
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robbery, receiving stolen property and retail theft after he allegedly stole a BB gun 
from Wal-Mart and used it to rob a pharmacy of painkiller medicine May 21. 

Source: http://triblive.com/news/westmoreland/4096951-74/trax-police- 
gun#axzz2UgiRjQK0 

45. May 28, Los Angeles Times - (California) Disneyland’s Toontown evacuated after 
explosion. The Anaheim Police Department reported a small explosion from an 
apparent dry ice bomb May 28 that forced them to evacuate the Toontown area of 
Disneyland for 2 hours and were investigating the event’s ties to a recent string of 
similar incidents. 

Source: http://www.latimes.com/news/local/la-me-0529-disnev-explosion- 
20130529,0,4347205.story 



46. May 28, Bangor Daily News - (Maine) Maine man rescues resident from apartment 
fire. A cooking-related fire at an apartment building in Augusta critically injured one 
man and displaced 14 residents May 28. 

Source: http://www.firehouse.com/news/10949889/maine-man-rescues-resident-from- 
apartment-fire 
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Dams Sector 



Nothing to report 
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